CVE-2024-46916

Summary

Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR06 contains functionality that allows the removal of critical system files before the filesystem is properly mounted (e.g., leveraging a delete call in /etc/rc.d/init.d/mountfs to remove the /etc/fstab file). This can allow code execution and, in some versions, enable recovery of TPM Disk Encryption keys and decryption of the Windows system partition.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/
• https://github.com/emptynebuli
• https://www.atredis.com/blog/2025/8/26/24nrgne4dqbwjxyip7txn8ep6zj057

• ←Previous
• Next→